Cannot access Microsoft Graph without user - the 'grant_type' is not present in the body

Question

Cannot access Microsoft Graph without user - the 'grant_type' is not present in the body

I am eager to dive into Microsoft Azure and Graph by creating a simple application that will utilize the Graph API as a background worker. Although I currently only have a demo account, I believe this should not pose a problem.

I am following along with this tutorial:

https://learn.microsoft.com/en-us/graph/auth-v2-service#4-get-an-access-token

since I do not require a user account for this process. My initial goal is to obtain an access token using Axios. Given that I use NestJs, Axios is encapsulated within an HTTP module.

So far, I have set up the request as follows:

async getToken(): Promise<any> {
    const requestURL: string = 'https://login.microsoftonline.com/2c1714e1-1030-4da9-af5e-59630d7fe05f/oauth2/v2.0/token';

    const requestBody: object = {
        tenant: '2c1714e1-1030-4da9-af5e-59630d7fe05f',
        client_id: 'bec52b71-dc94-4577-9f8d-b8536ed0e73d',
        scope: 'https://graph.microsoft.com/.default',
        client_secret: 'OV/NkBIWH7d3G/BGyJQN3vxQA]fT6qK@',
        grant_type: 'client_credentials',
    };

    const requestConfiguration: object = {
        headers: {
            'Content-Type': 'application/x-www-form-urlencoded',
        },
    };

    const observableResult: Observable<AxiosResponse<any>> = this.httpService.post(requestURL, requestBody, requestConfiguration);
    return observableResult.toPromise();
}

Upon execution, I encounter a 400 HTTP error along with the message:

"AADSTS900144: The request body must contain the following parameter: 'grant_type'.\r\nTrace ID: 038a3bf5-9396-4a4c-9dd6-b4608f265800\r\nCorrelation ID: a1871bfc-af0d-470e-b604-f94ea4f10325\r\nTimestamp: 2019-12-21 23:10:11Z"

Have I misinterpreted the documentation? What might be missing or incorrect in my setup? Thank you for any guidance in advance.

typescript azure-active-directory microsoft-graph-api nestjs office365api

Answer 1

Answer №1

Your information is accurate (postman receives token with your data). However, it appears that there was a mistake made when submitting the POST request.

According to the documentation you provided, the correct Content-Type should be set to

application/x-www-form-urlencoded

. Therefore, you must first convert the requestBody into URL encoded form (key=value&key2=value2) and include it in the body of the request instead of appending it to the URL. This can be a less obvious step...

const requestURL: string = 'https://login.microsoftonline.com/2c1714e1-1030-4da9-af5e-59630d7fe05f/oauth2/v2.0/token';

const requestBody: object = {
    tenant: '2c1714e1-1030-4da9-af5e-59630d7fe05f',
    client_id: 'bec52b71-dc94-4577-9f8d-b8536ed0e73d',
    scope: 'https://graph.microsoft.com/.default',
    client_secret: 'OV/NkBIWH7d3G/BGyJQN3vxQA]fT6qK@',
    grant_type: 'client_credentials',
};

let request = Object.keys(requestBody).map(k => `${encodeURIComponent(k)}=${encodeURIComponent(requestBody[k])}`).join('&')
this.httpService.post(requestURL, request, { headers: { 'content-type': 'application/x-www-form-urlencoded' } })

Answer 2

Your information is accurate (postman receives token with your data). However, it appears that there was a mistake made when submitting the POST request.

According to the documentation you provided, the correct Content-Type should be set to

application/x-www-form-urlencoded

. Therefore, you must first convert the requestBody into URL encoded form (key=value&key2=value2) and include it in the body of the request instead of appending it to the URL. This can be a less obvious step...

const requestURL: string = 'https://login.microsoftonline.com/2c1714e1-1030-4da9-af5e-59630d7fe05f/oauth2/v2.0/token';

const requestBody: object = {
    tenant: '2c1714e1-1030-4da9-af5e-59630d7fe05f',
    client_id: 'bec52b71-dc94-4577-9f8d-b8536ed0e73d',
    scope: 'https://graph.microsoft.com/.default',
    client_secret: 'OV/NkBIWH7d3G/BGyJQN3vxQA]fT6qK@',
    grant_type: 'client_credentials',
};

let request = Object.keys(requestBody).map(k => `${encodeURIComponent(k)}=${encodeURIComponent(requestBody[k])}`).join('&')
this.httpService.post(requestURL, request, { headers: { 'content-type': 'application/x-www-form-urlencoded' } })

Answer 3

Answer №2

Retrieve access token:

'use strict';

const axios = require('axios');
const qs = require('qs');

const generateAccessToken = (tenantId, clientId, clientSecret, resource) => {
    const data = {
        resource: resource,
        grant_type: 'client_credentials',
    };
    
    return axios({
        url: `https://login.windows.net/${tenantId}/oauth2/token`,
        method: "post",
        headers: { 'content-type': 'application/x-www-form-urlencoded' },
        auth: {
            username: clientId,
            password: clientSecret,
        },
        data:  qs.stringify(data)
    }).catch(error => {
        throw error;
    })
};

Usage example:

generateAccessToken(<tenantId>, <clientId>, <clientSecret>, 'https://graph.microsoft.com').then(response => {
    console.log(`Access token retrieved successfully`);
    const token = JSON.stringify(response.data.access_token);

    // Perform necessary actions with the access token

}).catch(err => {
     console.log("Error occurred: " + err);
     throw err;
});

Answer 4

Retrieve access token:

'use strict';

const axios = require('axios');
const qs = require('qs');

const generateAccessToken = (tenantId, clientId, clientSecret, resource) => {
    const data = {
        resource: resource,
        grant_type: 'client_credentials',
    };
    
    return axios({
        url: `https://login.windows.net/${tenantId}/oauth2/token`,
        method: "post",
        headers: { 'content-type': 'application/x-www-form-urlencoded' },
        auth: {
            username: clientId,
            password: clientSecret,
        },
        data:  qs.stringify(data)
    }).catch(error => {
        throw error;
    })
};

Usage example:

generateAccessToken(<tenantId>, <clientId>, <clientSecret>, 'https://graph.microsoft.com').then(response => {
    console.log(`Access token retrieved successfully`);
    const token = JSON.stringify(response.data.access_token);

    // Perform necessary actions with the access token

}).catch(err => {
     console.log("Error occurred: " + err);
     throw err;
});

Cannot access Microsoft Graph without user - the 'grant_type' is not present in the body

Answer №1

Answer №2

Similar questions

An Uncaught Error has occurred: The module titled "functions" has not been loaded within the current context _. To resolve this issue, please make sure to use

Circular dependency issue in NestJS

Exploring the elements within the ContentChildren directive in Angular

Guide on enabling external API login with Next Auth v5 in Next.js 14 using the application router

Wrapper functions that are nested are returning a Promise that resolves to another Promise of type T

Build a unique array of identifiers extracted from an object

``There seems to be an issue with the Deno logger FileHandler as it

Updating the background color using typescript

Retrieve the object's value by utilizing the string index in TypeScript and proceed to access it further

Resetting dynamic rows in Angular 6 when new ones are added

Using ngFormModel with Ionic 2

Output specification: Mandate certain attributes of a designated kind, while permitting them to be incomplete

The type 'string' is not a valid index for the type 'Partial<NewData>'

Declaration in Typescript for an array of strings that will be returned as a

Error: Certain Prisma model mappings are not being generated

The chaos of Typescript decorators

Having trouble with the Angular 17 Router functionality when running on a node server

What is the best way to add all the items from an array to a div element?

Having trouble compiling a Vue.js application with TypeScript project references?

Dynamically determine the length of an array using Typescript